Re: I-D ACTION:draft-ietf-openpgp-rfc2440bis-06.txt

"Michael Young" <> Mon, 12 August 2002 20:21 UTC

Received: from ( []) by (8.9.1a/8.9.1a) with ESMTP id QAA09902 for <>; Mon, 12 Aug 2002 16:21:29 -0400 (EDT)
Received: from localhost (localhost [[UNIX: localhost]]) by (8.11.6/8.11.3) id g7CKBrk26293 for ietf-openpgp-bks; Mon, 12 Aug 2002 13:11:53 -0700 (PDT)
Received: from ( []) by (8.11.6/8.11.3) with ESMTP id g7CKBkw26284 for <>; Mon, 12 Aug 2002 13:11:51 -0700 (PDT)
Received: from ( []) by (AIX4.3/UCB 8.7/8.7) with ESMTP id PAA14006 for <>; Mon, 12 Aug 2002 15:58:59 -0400 (EDT)
Received: from mwyoung ( []) by (8.8.0/8.8.0) with SMTP id QAA17982 for <>; Mon, 12 Aug 2002 16:11:42 -0400 (EDT)
Message-ID: <002001c2423c$5aa79bc0$>
From: "Michael Young" <>
To: "OpenPGP" <>
References: <> <> <>
Subject: Re: I-D ACTION:draft-ietf-openpgp-rfc2440bis-06.txt
Date: Mon, 12 Aug 2002 16:10:48 -0400
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
Precedence: bulk
List-Archive: <>
List-Unsubscribe: <>
List-ID: <>
Content-Transfer-Encoding: 7bit

Hash: SHA1

From: "David Shaw" <>
> 2440bis seems to say that v4 signatures require (MUST) an issuer subpacket 
> Come to think, both PGP and GnuPG create v4 signatures with a hashed
> timestamp, and an unhashed issuer.  Are they compliant? ;)

I don't think that the specification should require either.  It would be
fair to note that many implementations will be unable (or unwilling) to
interpret a signature without these things.

But even if the issuer remains a MUST, it certainly doesn't need
to be in the hashed material.  As it stands, the specification doesn't
say so exactly -- it merely suggests that they should be the first two
subpackets, which is silly if the timestamp is hashed but the issuer
is not.  I would just excise the suggestion entirely.

Version: PGP Personal Privacy 6.5.3